Archive
October 2006
Vulnerabilities first published in this month (UTC), newest first.
551 results · Feed
-
Unscored —CVE-2006-5427 Public exploit
PHP remote file inclusion vulnerability in plugins/main.php in Php AMX 0.9.0, when register_globals is enabled or magic…
-
Unscored —CVE-2006-5428 Public exploit
rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which …
-
Unscored —
Barry Nauta BRIM before 1.2.1 allows remote authenticated users to read information from other users via a modified URL.
-
Unscored —CVE-2006-5415 Public exploit
PHP remote file inclusion vulnerability in includes/functions_newshr.php in the News Defilante Horizontale 4.1.1 and ea…
-
Unscored —CVE-2006-5413 Public exploit
Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB (YaBBSM) allow remote attackers to execut…
-
Unscored —
McAfee Network Agent (mcnasvc.exe) 1.0.178.0, as used by multiple McAfee products possibly including Internet Security …
-
Unscored —CVE-2006-5421 Public exploit
WSN Forum 1.3.4 and earlier allows remote attackers to execute arbitrary PHP code via a modified pathname in the pathto…
-
Unscored —CVE-2006-5412 Public exploit
admin.php in PHP Outburst Easynews 4.4.1 and earlier, when register_globals is enabled, allows remote attackers to bypa…
-
Unscored —
Kerio WinRoute Firewall 6.2.2 and earlier allows remote attackers to cause a denial of service (crash) via malformed DN…
-
Unscored —CVE-2006-5418 Public exploit
PHP remote file inclusion vulnerability in archive/archive_topic.php in pbpbb archive for search engines (SearchIndexer…
-
Unscored —CVE-2006-5422 Public exploit
PHP remote file inclusion vulnerability in calcul-page.php in Lodel (patchlodel) 0.7.3 allows remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in my.acctab.php3 in F5 Networks FirePass 1000 SSL VPN 5.5, and possibly earli…
-
Unscored —CVE-2006-5419 Public exploit
PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database (SID), when regi…
-
Unscored —
PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote att…
-
Unscored —
Multiple SQL injection vulnerabilities in the wireless IDS management interface for Highwall Enterprise and Highwall En…
-
Unscored —CVE-2006-5411 Public exploit
Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlie…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the wireless IDS management interface for Highwall Enterprise an…
-
Unscored —
Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVir…
-
Unscored —
Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiV…
-
Unscored —
PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to execute arbitrary PHP c…
-
Unscored —
Passgo Defender 5.2 creates the application directory with insecure permissions (Everyone/Full Control), which allows l…
-
Unscored —
Unspecified vulnerability in Toshiba Bluetooth wireless device driver 3.x and 4 through 4.00.35, as used in multiple pr…
-
Unscored —CVE-2006-5399 Public exploit
PHP remote file inclusion vulnerability in classes/Import_MM.class.php in PHPRecipeBook 2.36, when register_globals is …
-
Unscored —CVE-2006-5401 Public exploit
PHP remote file inclusion vulnerability in template/barnraiser_01/p_new_password.tpl.php in AROUNDMe 0.5.2 and earlier …
-
Unscored —CVE-2006-5398 Public exploit
SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2006-5400 Public exploit
PHP remote file inclusion vulnerability in forum/track.php in CyberBrau 0.9.4, when register_globals is enabled, allows…
-
Unscored —CVE-2006-5402 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHPmybibli 3.0.1 and earlier allow remote attackers to execute ar…
-
Unscored —
IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions (Everyone/Full Control) for the…
-
Unscored —CVE-2006-5388 Public exploit
SQL injection vulnerability in index.php in WebSPELL 4.01.01 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow remote attackers to execu…
-
Unscored —CVE-2006-5395 Public exploit
Buffer overflow in Microsoft Class Package Export Tool (aka clspack.exe) allows context-dependent attackers to execute …
-
Unscored —CVE-2006-5383 Public exploit
SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —
The default configuration of Cisco Secure Desktop (CSD) has an unchecked "Disable printing" box in Secure Desktop Setti…
-
Unscored —CVE-2006-5391 Public exploit
Xfire 1.64 and earlier allows remote attackers to cause a denial of service (client application crash) via a long strin…
-
Unscored —CVE-2006-5384 Public exploit
PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 …
-
Unscored —CVE-2006-5385 Public exploit
PHP remote file inclusion vulnerability in admin/admin_spam.php in the SpamOborona 1.0b and earlier phpBB module allows…
-
Unscored —CVE-2006-5387 Public exploit
PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB modul…
-
Unscored —CVE-2006-5390 Public exploit
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in the ACP User Registration (MMW) 1.00 modu…
-
Medium 5.5
Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equal…
-
Unscored —
The tcp_fuse_rcv_drain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is enabled, allows local …